CVE-2019-18573

CVE-2019-18573 is a Session Fixation vulnerability affecting RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to version 7.1.1 P03. This flaw allows an authenticated local attacker to expose a session token in the URL, enabling a remote attacker to hijack a victim's session and perform arbitrary actions with their privileges. Rated 8.8 HIGH on CVSS, this vulnerability has a network attack vector, low attack complexity, and high impacts on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.